Online storage service system and its data control method

Abstract

A WEB service providing server can execute WEB service processing using data provided by an online storage service providing server, and leaking of data at the WEB service providing server can be prevented. A WEB service providing server 102 requests, in response to a service request from a client terminal 100, that an online storage service providing server 101 provides data that will satisfy the service request. The online storage service providing server 101 extracts content data from storage devices, encrypts the extracted content data, and provides the WEB service providing server 102 with storage service data composed of data including the encrypted content data and metadata. The WEB service providing server 102 constructs a WEB service screen according to the metadata and provides the client terminal 100 with the constructed WEB service screen.

1 . Online storage service system comprising:
 an online storage service providing server for storing content data relating to a client terminal coupled to a network, in storage devices; and   a WEB service providing server coupled via the network to the client terminal and the online storage service providing server, for providing the client terminal with a WEB service via the network;   wherein the WEB service providing server includes a WEB service control device that requests, in response to a service request from the client terminal, provision of data designated by the service request from the online storage service providing server, generates WEB structure data that complies with the service request, based on storage service data provided by the online storage service providing server, and provides the client terminal with a WEB service message composed of data including the generated WEB structure data and the storage service data; and   wherein the online storage service providing server includes a storage control device that, in response to a request from the WEB service providing server, extracts the content data from the storage devices, encrypts at least part of the extracted content data, and provides the WEB service providing server with the storage service data composed of data including the encrypted content data.   
     
     
         2 . The online storage service system according to  claim 1 , wherein the WEB service control device includes:
 a first transfer unit coupled to the network for sending/receiving data to/from the client terminal or the online storage service providing server;   a first query analysis unit for analyzing the service request when the first transfer unit receives the service request from the client terminal;   a service structure design unit for designing a service structure relating to the WEB service based on metadata in the storage service data when the first transfer unit receives the storage service data from the online storage service providing server; and   a first session management unit for requesting that the online storage service providing server provides, via the first transfer unit, data necessary to satisfy the service request data based on the result of analysis by the first query analysis unit, and for transferring a WEB service message including data about the service structure designed by the service structure design unit and the storage service data received by the first transfer unit, via the first transfer unit to the client terminal; and   wherein the storage control device includes:   a second transfer unit coupled to the network for sending/receiving data to/from the client terminal or the WEB service providing server;   a second query analysis unit for analyzing a request from the WEB service providing server and creating a request data list to satisfy the request when the second transfer unit receives the request from the WEB service providing server;   a content database storing the content data;   a data management unit for extracting the content data from the content database in accordance with the request data list created by the second query analysis unit;   an encrypting unit for encrypting the content data extracted by the data management unit;   a metadata extraction unit for extracting metadata from the content data extracted by the data management unit; and   a second session management unit for providing the WEB service providing server via the second transfer unit the storage service data composed of data including the content data encrypted by the encrypting unit and the metadata extracted by the metadata extraction unit.   
     
     
         3 . The online storage service system according to  claim 1 , wherein the storage control device encrypts the content data extracted from the storage devices, extracts side information storage portion data, which is additional information of the extracted content data, from the extracted content data, and provides the WEB service providing server with the storage service data composed of data including the encrypted content data and the extracted side information storage portion data; and
 wherein the WEB service control device extracts the side information storage portion data from the storage service data provided by the storage control device for the online storage service providing server and generates WEB structure data that complies with the service request from the client terminal based on the extracted side information storage portion data.   
     
     
         4 . The online storage service system according to  claim 1 , wherein the storage control device separates the content data extracted from the storage devices into coding portion data and side information storage portion that is additional information for the coding portion, encrypts the separated coding portion data, and provides the WEB service providing server with the storage service data composed of data including the encrypted coding portion data and the separated side information storage portion data; and
 wherein the WEB service control device extracts the separated side information storage portion data from the storage service data provided by the storage control device for the online storage service providing server and generates WEB structure data that complies with the service request from the client terminal, based on the extracted side information storage portion data.   
     
     
         5 . The online storage service system according to  claim 1 , wherein the client terminal includes a terminal control device for sending the service request to the WEB service providing server, decrypting the encrypted data in the WEB service message provided by the WEB service providing server, laying out a page structure based on the decrypted data and the WEB structure data in the WEB service message provided by the WEB service providing server, and displaying the laid out page structure on screen. 
     
     
         6 . The online storage service system according to  claim 1 , wherein the client terminal includes a terminal control device for extracting the encrypted content data from the WEB service message provided by the WEB service providing server, decrypting the extracted content data, laying out a page structure based on the decrypted content data and the WEB structure data in the WEB service message provided by the WEB service providing server, and displaying the laid out page structure on screen. 
     
     
         7 . The online storage service system according to  claim 1 , wherein the client terminal includes a terminal control device for extracting the encrypted coding portion data from the WEB service message provided by the WEB service providing server, decrypting the extracted coding portion data, laying out a page structure based on the decrypted coding portion data and the WEB structure data in the WEB service message provided by the WEB service providing server, and displaying the laid out page structure on screen. 
     
     
         8 . A data control method for an online storage service system including:
 an online storage service providing server for storing content data relating to a client terminal coupled to a network, in storage devices; and   a WEB service providing server coupled via the network to the client terminal and the online storage service providing server, for providing the client terminal with a WEB service via the network;   wherein the WEB service providing server executes a request step of requesting, in response to a service request from the client terminal, that the online storage service providing server provides data designated by the service request;   wherein the online storage service providing server executes:   a data extraction step of extracting the content data from the storage devices in response to a request from the WEB service providing server;   an encrypting step of encrypting at least part of the content data extracted in the above data extraction step; and   a service data provision step of providing the WEB service providing server with storage service data including the content data encrypted in the encrypting step; and   wherein the WEB service providing server further executes:   a data generation step of generating WEB structure data that complies with the service request from the client terminal, based on the storage service data provided by the online storage service providing server; and   a message provision step of providing the client terminal with a WEB service message including the WEB structure data generated in the data generation step and the storage service data.   
     
     
         9 . The data control method for the online storage service system according to  claim 8 , wherein in the data extraction step, the online storage service providing server extracts the content data from the storage devices and also extracts side information storage portion data, which is additional information for the extracted content data, from the extracted content data;
 in the encrypting step, the online storage service providing server encrypts the entire content data extracted in the data extraction step; and   in the service data provision step, the online storage service providing server provides the WEB service providing server with the storage service data composed of data including the content data encrypted in the encrypting step and the side information storage portion data extracted in the data extraction step; and   wherein prior to the data generation step, the WEB service providing server executes a side information extraction step of extracting the side information storage portion data from the storage service data provided by the online storage service providing server; and   in the data generation step, the WEB service providing server generates WEB structure data that complies with the service request from the client terminal, based on the side information storage portion data extracted in the side information extraction step.   
     
     
         10 . The data control method for the online storage service system according to  claim 8 , wherein after the data extraction step, the online storage service providing server executes a separation step of separating the content data extracted in the data extraction step into coding portion data and side information storage portion data that is additional information for the coding portion;
 in the encrypting step, the online storage service providing server encrypts the coding portion data separated in the separation step; and   in the service data provision step, the online storage service providing server provides the WEB service providing server with the storage service data composed of data including the side information storage portion data separated in the separation step and the coding portion data encrypted in the encrypting step; and   wherein prior to the data generation step, the WEB service providing server executes a side information extraction step of extracting the side information storage portion data from the storage service data provided by the online storage service providing server; and   in the data generation step, the WEB service providing server generates WEB structure data that complies with the service request from the client terminal, based on the side information storage portion data extracted in the side information extraction step.   
     
     
         11 . The data control method for the online storage service system according to  claim 8 , wherein the client terminal executes:
 a transmission step of transmitting the service request to the WEB service providing server;   a decrypting step of decrypting the encrypted content data in the WEB service message provided by the WEB service providing server; and   a display step of laying out a page structure based on the content data decrypted in the decrypting step and the WEB structure data in the WEB service message provided by the WEB service providing server and displaying the laid out page structure on screen.